Skip to content

chore(deps-dev): bump portalocker from 2.10.1 to 4.4.1 - #1590

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/portalocker-4.4.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/portalocker-4.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026 •

Copy link
Copy Markdown
Contributor

Bumps portalocker from 2.10.1 to 4.4.1.

Release notes

Sourced from portalocker's releases.

v4.4.1

4.4.1:

  • open_atomic now anchors a relative destination when the context is entered, so a working-directory change inside the body no longer makes publication raise FileNotFoundError or leaves the temporary file behind after a failing body. As a consequence the name of the yielded handle and the paths in its FileExistsError messages are now absolute. Reported and fixed by Luochenchen.
  • Refreshed the pinned revisions of the CI actions, setup-uv and codeql-action among them. No library code changed for this.

v4.4.0

4.4.0:

  • Deprecated passing a bool as timeout or check_interval. bool subclasses int, so Lock(timeout=True) has always meant one second and timeout=False zero, rather than anything the caller intended. The value is still honoured and now warns, and it raises TypeError in 5.0. Reported and originally patched by Jon Bailey.
  • Pull requests no longer fail on lint findings ruff can fix by itself. CI applies those fixes and the autofix.ci app commits them to the branch, forks included, so the build only stops for findings that need a decision, such as whether a pytest.raises pattern was meant as a regular expression. No library code changed for this.

v4.3.2

4.3.2:

  • Restored the coverage badge. CI now merges the coverage data from every matrix cell, holds the merged result to the same 100% threshold each cell already enforces, and uploads it to Coveralls, so the badge measures a build instead of repeating a fixed claim. This release carries that README to PyPI. No library code changed.
  • Refreshed the pinned revisions of the CI actions, setup-uv across a major version among them.

v4.3.1

4.3.1:

  • Refreshed the README in Markdown and added a branded documentation landing page, light and dark logos, and links to the locking guides. README examples now run directly from their Markdown source in tests.
  • Corrected the Linux mandatory-locking advice and clarified that Redis subscription removal and local loss detection can happen at different times during a network failure.
  • Capped Redis retry sleeps at the acquisition deadline. A large check_interval no longer adds a full interval after the timeout. Reply polling retains its final read so buffered holder responses are

... (truncated)

Changelog

Sourced from portalocker's changelog.

4.4.1:

  • open_atomic now anchors a relative destination when the context is entered, so a working-directory change inside the body no longer makes publication raise FileNotFoundError or leaves the temporary file behind after a failing body. As a consequence the name of the yielded handle and the paths in its FileExistsError messages are now absolute. Reported and fixed by Luochenchen.
  • Refreshed the pinned revisions of the CI actions, setup-uv and codeql-action among them. No library code changed for this.

4.4.0:

  • Deprecated passing a bool as timeout or check_interval. bool subclasses int, so Lock(timeout=True) has always meant one second and timeout=False zero, rather than anything the caller intended. The value is still honoured and now warns, and it raises TypeError in 5.0. Reported and originally patched by Jon Bailey.
  • Pull requests no longer fail on lint findings ruff can fix by itself. CI applies those fixes and the autofix.ci app commits them to the branch, forks included, so the build only stops for findings that need a decision, such as whether a pytest.raises pattern was meant as a regular expression. No library code changed for this.

4.3.2:

  • Restored the coverage badge. CI now merges the coverage data from every matrix cell, holds the merged result to the same 100% threshold each cell already enforces, and uploads it to Coveralls, so the badge measures a build instead of repeating a fixed claim. This release carries that README to PyPI. No library code changed.
  • Refreshed the pinned revisions of the CI actions, setup-uv across a major version among them.

4.3.1:

  • Refreshed the README in Markdown and added a branded documentation landing page, light and dark logos, and links to the locking guides. README examples now run directly from their Markdown source in tests.
  • Corrected the Linux mandatory-locking advice and clarified that Redis subscription removal and local loss detection can happen at different times during a network failure.
  • Capped Redis retry sleeps at the acquisition deadline. A large check_interval no longer adds a full interval after the timeout. Reply polling retains its final read so buffered holder responses are processed before deciding that a holder is unavailable.
  • Fixed cancelled Redis acquisition leaving a subscription or elected writer behind. Cancellation during setup or between attempts now releases resources, preserves the original exception and permits reuse.

... (truncated)

Commits
  • baaf554 Prepare 4.4.1 with the open_atomic chdir fix
  • dfc0f1c Merge pull request #154 from harbinresearcher/codex/preserve-atomic-path-afte...
  • 40606e9 Merge pull request #152 from wolph/dependabot/github_actions/develop/actions-...
  • 6608d70 fix: anchor atomic output paths before entering the body
  • b01f12a Bump the actions group with 3 updates
  • c490bea Prepare 4.4.0 with the bool timeout deprecation
  • 9905718 Deprecate bool for Lock timeout and check_interval
  • f9253cc Merge pull request #149 from wolph/dependabot/github_actions/develop/actions-...
  • 6c44f07 Let ruff fix what it can before the lint gate runs
  • 4193d14 Bump shogo82148/actions-setup-redis in the actions group
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
portalocker [>= 3.dev0, < 4]

@dependabot
dependabot Bot requested a review from a team as a code owner October 15, 2026 05:13
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 15, 2026
@dependabot
dependabot Bot changed the base branch from chore/consolidate-dependabot-updates to main October 21, 2026 22:35
@dependabot dependabot Bot changed the title chore(deps-dev): bump portalocker from 2.10.1 to 4.4.0 chore(deps-dev): bump portalocker from 2.10.1 to 4.4.1 Oct 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/portalocker-4.4.0 branch from eda89a1 to 7454dfa Compare October 21, 2026 22:35
Bumps [portalocker](https://github.com/wolph/portalocker) from 2.10.1 to 4.4.1.
- [Release notes](https://github.com/wolph/portalocker/releases)
- [Changelog](https://github.com/wolph/portalocker/blob/develop/CHANGELOG.rst)
- [Commits](wolph/portalocker@v2.10.1...v4.4.1)

---
updated-dependencies:
- dependency-name: portalocker
  dependency-version: 4.4.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/portalocker-4.4.0 branch from 7454dfa to 10f2cb7 Compare October 22, 2026 17:22

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants